Nagios vulnerability

2009-07-0200:00:00

ubuntu.com

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.97 High

EPSS

Percentile

99.7%

JSON

Releases

Ubuntu 9.04
Ubuntu 8.10
Ubuntu 8.04

Packages

nagios2 -
nagios3 -

Details

It was discovered that Nagios did not properly parse certain commands
submitted using the WAP web interface. An authenticated user could exploit
this flaw and execute arbitrary programs on the server.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.04noarchnagios3< 3.0.6-2ubuntu1.1UNKNOWN
Ubuntu9.04noarchnagios3-dbg< 3.0.6-2ubuntu1.1UNKNOWN
Ubuntu8.10noarchnagios3< 3.0.2-1ubuntu1.2UNKNOWN
Ubuntu8.10noarchnagios3-dbg< 3.0.2-1ubuntu1.2UNKNOWN
Ubuntu8.04noarchnagios2< 2.11-1ubuntu1.5UNKNOWN
Ubuntu8.04noarchnagios2-dbg< 2.11-1ubuntu1.5UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	9.04	noarch	nagios3	< 3.0.6-2ubuntu1.1	UNKNOWN
Ubuntu	9.04	noarch	nagios3-dbg	< 3.0.6-2ubuntu1.1	UNKNOWN
Ubuntu	8.10	noarch	nagios3	< 3.0.2-1ubuntu1.2	UNKNOWN
Ubuntu	8.10	noarch	nagios3-dbg	< 3.0.2-1ubuntu1.2	UNKNOWN
Ubuntu	8.04	noarch	nagios2	< 2.11-1ubuntu1.5	UNKNOWN
Ubuntu	8.04	noarch	nagios2-dbg	< 2.11-1ubuntu1.5	UNKNOWN